codetopo

codetopo turns a Rust or Python codebase into a queryable graph of symbols, calls, and imports, and serves that graph to AI coding agents over MCP (17 tools), a command-line interface, and an HTTP API (17 endpoints). An agent can find a symbol, trace what calls it and what it calls, and compute the blast radius of a change before making it. Symbols rank by fan-in, fan-out, blast-radius size, or cyclomatic complexity, with the counting method stated beside every number. The metrics layer reports McCabe complexity, coupling (CBO, RFC, ATFD, WMC) and cohesion (LCOM, TCC) per type, and Ca, Ce, and instability per package. On a local machine it also reads git history for hotspots — change frequency × complexity, both factors shown — and change coupling as support/confidence counts; where no history exists, the answer is "not measured", never an invented number. Snapshots are proof-checked against a tamper-evident audit chain (verify/attest). The local server is free and open source (AGPL-3.0): indexes stay on your machine, indexing is read-only, nothing is executed, and there is no telemetry and no account. A hosted API is available for teams that do not want to run the server. OpenSSF Best Practices — Passing badge (bestpractices.dev/projects/15421).